AI developer toolsBriefConfirmed by two or more outlets
OpenClaw (formerly Clawdbot / Moltbot) agent crisis: CVE-2026-25253 and ClawHavoc malicious skills
CVE-2026-25253: one-click RCE (CVSS 8.8).
- Disclosed
What happened
- CVE-2026-25253: one-click RCE (CVSS 8.8). A `gatewayUrl` query parameter leaked the gateway token over a WebSocket. Fixed: 2026.1.29. Sources give conflicting fix versions.
- More CVEs: CVE-2026-24763, -26322, -26329, -30741.
- ClawHavoc: 341 of 2,857 ClawHub skills were malicious (Koi), mostly Atomic macOS Stealer. Later counts reach 824+ and 1,400+.
Live scores
Live scores
CVE-2026-24763- EPSS
- 0.052
some chance of attack soon - VEDAS
- 0.935
strong exploit evidence - On CISA KEV
- Not listed
- Detection rule
- None yet
Live scores
CVE-2026-25253- EPSS
- 0.324
likely to be attacked soon - VEDAS
- 0.980
strong exploit evidence - On CISA KEV
- Not listed
- Detection rule
- None yet
Live scores
CVE-2026-26322- EPSS
- 0.004
low predicted chance of attack - VEDAS
- 0.921
strong exploit evidence - On CISA KEV
- Not listed
- Detection rule
- None yet
Live scores
CVE-2026-26329- EPSS
- 0.005
low predicted chance of attack - VEDAS
- 0.818
some exploit evidence - On CISA KEV
- Not listed
- Detection rule
- None yet
Live scores
CVE-2026-30741- EPSS
- 0.009
low predicted chance of attack - VEDAS
- 0.047
little exploit evidence - On CISA KEV
- Not listed
- Detection rule
- None yet
Sources
- https://adversa.ai/blog/openclaw-security-101-vulnerabilities-hardening-2026/
- https://nvd.nist.gov/vuln/detail/CVE-2026-25253
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.